$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json) Hash identifier: 7AqIFt7tXukLVg9xE/pStY+Pi2EpT5/WBlDZLjGfpKI= Subject key identifier: 4D:AB:34:94:B1:56:4B:9A:88:96:BF:B7:EE:D6:3F:3E:A9:82:1A:F9 Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Certificate serial: 0A79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft Manifest number: 0A73 Signing time: Fri 22 Aug 2025 19:45:51 +0000 Manifest this update: Fri 22 Aug 2025 19:45:50 +0000 Manifest next update: Fri 29 Aug 2025 19:45:50 +0000 Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: ng6an+FCXj4H8FgNySEZnvSzMNgX7gLALpdG6YK0iGM=) 2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: nyOJoLIDGp7/wafl1yH4CbKrruUiB3iOpUkQ72n7ZjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2681 (0xa79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Validity Not Before: Aug 22 19:45:50 2025 GMT Not After : Aug 29 19:45:50 2025 GMT Subject: CN=68a8c8ee-eac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0c:d8:d7:02:0e:96:4a:99:dc:41:5f:de:8c: e4:47:8c:53:f3:1d:95:ba:d3:87:e7:6c:47:c4:8f: be:12:85:08:1d:ca:61:50:4e:54:30:71:11:70:98: e7:96:51:d6:6f:65:52:03:eb:f4:70:e8:b0:75:d8: fb:5b:96:59:04:ab:72:f4:63:f9:03:b1:88:3c:91: 54:83:e4:8a:0b:2a:26:81:8d:d9:eb:28:dd:01:46: 49:05:1b:43:ba:e3:e2:9f:1d:1e:46:0f:c0:41:d1: de:51:98:7f:90:97:b2:61:30:1a:d1:51:12:4f:3a: 7d:e7:6d:05:0a:39:48:9b:d0:c5:44:38:8d:70:ec: e7:19:c0:9f:9a:87:8b:3b:b9:08:81:58:2f:ce:42: e0:ee:44:46:e1:53:87:32:b4:63:2a:95:e9:25:77: 8f:92:01:98:02:f6:dc:c7:b5:45:fd:f3:de:7b:14: 36:c8:78:81:3c:25:ea:7c:7e:dd:8f:71:92:9b:dd: 01:45:2c:b1:bc:35:8d:3f:0c:bc:99:28:ae:67:8d: 9c:d0:c5:1c:20:55:a5:47:b4:c5:c5:ae:29:d9:3c: b7:1b:54:84:16:fc:3f:e4:8e:f6:6f:14:6d:3c:d0: d5:4d:8d:fa:d1:aa:bd:fe:c8:0c:3a:c5:60:3b:99: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AB:34:94:B1:56:4B:9A:88:96:BF:B7:EE:D6:3F:3E:A9:82:1A:F9 X509v3 Authority Key Identifier: keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:dd:e5:1f:f9:6a:b2:ac:e2:a6:bd:c1:2d:b7:a8:f6:a6:b1: 3a:7b:1f:52:97:35:39:dd:8c:b2:3e:a9:bc:3f:34:af:f9:ad: 0c:c3:39:bb:82:39:56:93:b8:0e:b6:f2:c7:fd:f2:ff:3a:9f: 41:35:94:b4:a7:2a:1f:15:9b:6c:e0:69:26:0b:e7:5c:38:38: 77:3b:74:64:59:be:e9:75:34:63:60:0f:dc:3c:e6:05:b1:ba: ef:f7:8a:20:6c:13:2b:94:af:4a:f7:e4:5b:d2:ad:27:38:e7: eb:4b:8d:91:ad:ad:78:f7:0b:17:10:b8:24:01:9c:a9:54:17: 66:20:01:23:ea:88:58:17:5a:0d:a9:d3:b2:56:5d:87:45:ef: 4f:2a:f4:2f:da:4e:bf:f9:c9:f5:b7:ed:c9:88:2f:17:1a:7a: 8a:aa:f3:d8:2d:e9:b7:4a:86:dd:1e:62:31:ad:08:20:f9:09: a7:2f:d1:66:e5:c2:aa:ef:2d:30:e0:24:f0:11:de:04:a8:55: e0:66:7d:25:5a:f1:aa:27:48:63:14:d3:e8:b7:a8:4a:36:42: 65:39:0c:f2:45:54:c6:09:e8:01:7b:ec:21:d0:75:91:a9:45: 7d:78:f8:b4:98:7c:36:50:95:21:44:14:3a:88:95:25:47:aa: dd:64:50:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF QUUzRUYzQzAwHhcNMjUwODIyMTk0NTUwWhcNMjUwODI5MTk0NTUwWjAYMRYwFAYD VQQDEw02OGE4YzhlZS1lYWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5AzY1wIOlkqZ3EFf3ozkR4xT8x2VutOH52xHxI++EoUIHcphUE5UMHERcJjn llHWb2VSA+v0cOiwddj7W5ZZBKty9GP5A7GIPJFUg+SKCyomgY3Z6yjdAUZJBRtD uuPinx0eRg/AQdHeUZh/kJeyYTAa0VESTzp9520FCjlIm9DFRDiNcOznGcCfmoeL O7kIgVgvzkLg7kRG4VOHMrRjKpXpJXePkgGYAvbcx7VF/fPeexQ2yHiBPCXqfH7d j3GSm90BRSyxvDWNPwy8mSiuZ42c0MUcIFWlR7TFxa4p2Ty3G1SEFvw/5I72bxRt PNDVTY360aq9/sgMOsVgO5mdcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2rNJSx VkuaiJa/t+7WPz6pghr5MB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3 OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OURGMi85OTk4RjFDNDY3OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0 TTJIYlZadGJhNFBxNC04OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ3eUf+WqyrOKmvcEtt6j2prE6ex9SlzU53YyyPqm8PzSv+a0Mwzm7 gjlWk7gOtvLH/fL/Op9BNZS0pyofFZts4GkmC+dcODh3O3RkWb7pdTRjYA/cPOYF sbrv94ogbBMrlK9K9+Rb0q0nOOfrS42Rra149wsXELgkAZypVBdmIAEj6ohYF1oN qdOyVl2HRe9PKvQv2k6/+cn1t+3JiC8XGnqKqvPYLem3SobdHmIxrQgg+QmnL9Fm 5cKq7y0w4CTwEd4EqFXgZn0lWvGqJ0hjFNPot6hKNkJlOQzyRVTGCegBe+wh0HWR qUV9ePi0mHw2UJUhRBQ6iJUlR6rdZFCj -----END CERTIFICATE-----Generated at Sat Aug 23 19:07:20 2025 by rpki-client